A UK retail cyberattack campaign is headed to the US, researcher warns